Skill UI

This expert playbook provides comprehensive techniques for testing Cross-Site Request Forgery (CSRF) vulnerabilities in web applications. It covers identifying state-changing endpoints, bypassing anti-CSRF tokens (including missing validation and predictable tokens), and exploiting modern weaknesses like SameSite=Lax via GET methods or misconfigured JSON APIs. Essential reading for security professionals and penetration testers.

This expert playbook covers advanced techniques for email header injection and authentication bypass. It details exploiting CRLF vulnerabilities in SMTP headers (e.g., BCC/CC injection, body control) and bypassing modern email security standards like SPF, DKIM, and DMARC. Essential for penetration testing of contact forms, email APIs, and password reset workflows.

A comprehensive playbook for advanced API security testing targeting GraphQL and REST APIs. It guides users through schema introspection, discovering hidden or undocumented fields, analyzing batching capabilities, and identifying authorization gaps (like IDORs). Essential for deep reconnaissance and identifying privilege escalation vectors.

This skill provides comprehensive testing for WebSocket APIs, covering protocol basics, Cross-Site WebSocket Hijacking (CSWSH), and common security flaws. Use it when testing applications that rely on real-time communication, chat features, or persistent data streams. It validates Origin checks, session binding, and message integrity.

This skill guides the creation of production-grade Model Context Protocol (MCP) servers and basic clients using C# and the .NET framework. It ensures adherence to the stable 2.x specification, addressing common pitfalls like stateful/stateless HTTP defaults, handling deprecations (roots, sampling), and utilizing appropriate transports (STDIO, Streamable HTTP). Essential for developers integrating structured AI APIs into enterprise applications.

This guide outlines architectural patterns and best practices for building scalable, production-ready APIs with FastAPI. It covers proper project structure, separating concerns using routers, services, and CRUD layers, implementing dependency injection for database sessions and authentication, defining Pydantic schemas for request/response, handling asynchronous operations, and managing custom error responses.

Direct access to Google's SEO APIs including Search Console, PageSpeed Insights, CrUX field data, Indexing API, and GA4 organic traffic. Provides real-time field data for Core Web Vitals, indexation status, search performance, and organic traffic trends. Use for SEO analysis, website performance monitoring, and search optimization.

This skill provides comprehensive maps intelligence for local SEO optimization. It enables geo-grid rank tracking, Google Business Profile auditing, cross-platform review analysis, and NAP verification. It supports multiple tiers from free APIs to paid DataForSEO and Google Maps Platform integration. Ideal for analyzing business visibility on Google Maps, Bing Places, and Apple Maps.

This skill enables developers to integrate X (Twitter) data extraction into applications and AI workflows. It supports SDKs, REST APIs, Apify Actors, and MCP tools for searching tweets, exporting followers, and automating account actions with secure webhooks.

An expert AI specializing in Slang shader programming for high-performance graphics and compute applications. This model excels at writing, reviewing, refactoring, and optimizing production-grade code for various graphics stages (vertex, fragment, compute, ray tracing, tessellation). It ensures cross-platform compatibility across major APIs (D3D12, Vulkan, Metal, OpenGL) and supports advanced concepts like generics, parameter blocks, and automatic differentiation. Use this skill when integrating shaders into C++ engines or requiring deep knowledge of low-level GPU pipelines.

Provides a structured workflow for systematically accessing and analyzing official intellectual property data from the USPTO. This skill covers patent search (PatentSearch API), trademark status checks (TSDR), ownership transfer tracking, and building reproducible IP landscape logs. It is designed for data collection and record verification, emphasizing the use of official APIs and rigorous logging practices. (Warning: Not for legal advice.)

A comprehensive tool designed for academic literature orientation. It searches papers using free keyless APIs (PubMed and OpenAlex) and builds a structured 'launching pad' guide, rather than a finished review. It helps researchers define their scope using frameworks like PICO/SPIDER, ensuring a confident and systematic starting point for deep research in unfamiliar fields.